Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa
File:                     4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa (raw, json)
Hash identifier:          BXYMwFNKcDZ4vmybWbAKUpapo7K2rLUOsBX0vSVsDMY=
Subject key identifier:   77:FE:EC:FE:5F:74:F0:C3:15:39:62:3A:6D:B7:52:00:35:28:AB:05
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584E2809A33CD109E2A26FC86B80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa
Signing time:             Sat 13 Jun 2026 09:00:12 +0000
ROA not before:           Sat 13 Jun 2026 09:00:12 +0000
ROA not after:            Fri 11 Sep 2026 09:00:12 +0000
asID:                     134365
IP address blocks:        198.44.172.0/23 maxlen: 23
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/23 maxlen: 23
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:28:09:a3:3c:d1:09:e2:a2:6f:c8:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jun 13 09:00:12 2026 GMT
            Not After : Sep 11 09:00:12 2026 GMT
        Subject: CN=a5139e29-3eca-4ac2-ad2d-fbe0df77c948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:ea:ef:6d:f0:a8:9c:9b:74:03:2d:b6:d4:
                    1e:16:95:6b:9a:48:78:57:08:5f:97:b5:f8:cb:85:
                    ed:f3:3c:60:14:74:bf:ed:e7:f2:30:7a:72:51:22:
                    7a:81:c7:b8:20:47:35:18:81:41:96:2e:35:ba:01:
                    63:90:c7:71:51:8a:f4:db:ae:5d:21:bb:5c:1f:b8:
                    1b:4d:0c:9c:5b:eb:84:47:30:25:e9:0d:62:39:3e:
                    16:95:49:ab:04:f3:d6:24:dc:10:a8:2d:fa:2f:61:
                    89:0e:fb:d7:b0:10:66:9b:cf:c0:77:bb:ea:e1:6b:
                    41:37:79:ee:44:cc:c1:c9:5c:fa:41:a7:bf:54:65:
                    90:67:ca:66:04:3d:89:e3:e5:5f:ed:5f:27:a1:60:
                    2b:6d:77:fe:ca:47:28:25:bd:45:b1:d8:ba:c9:fb:
                    d2:b2:d5:80:52:87:d2:30:60:95:c3:9c:90:7b:e4:
                    cc:dc:dc:3f:f8:3b:78:d2:87:6c:8f:31:4c:1f:3d:
                    a2:2d:59:4f:2c:ca:ae:80:78:65:9c:cc:09:6a:e3:
                    d3:fd:17:12:15:8c:31:23:06:81:f5:1b:69:5b:1d:
                    a3:da:0a:58:cd:bb:d5:09:73:8e:bb:5c:9e:5a:3f:
                    e8:08:27:c2:31:f7:15:ba:17:7c:e7:f2:3f:65:86:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:EC:FE:5F:74:F0:C3:15:39:62:3A:6D:B7:52:00:35:28:AB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4d98a805-abed-37f8-a3c2-4b3ef4f6f7a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fd:35:2b:45:d7:9d:af:dc:63:95:68:b5:18:29:30:1b:8d:
         16:c0:9d:7c:cd:67:ca:4e:4f:35:7f:83:23:b4:aa:4b:fb:dd:
         7e:61:c4:b8:f4:84:a2:2a:b3:a3:3f:d5:05:04:2c:60:8b:81:
         99:9f:34:0c:e7:cf:e0:87:23:4e:7f:4a:b9:25:02:a4:1f:ef:
         f2:b6:ab:9e:65:8a:ef:1b:37:64:62:9d:43:c5:ae:cf:32:20:
         cf:08:3a:be:66:f7:29:74:21:d2:40:7b:b7:6d:39:62:ca:aa:
         50:09:c7:c9:5c:8a:11:99:f5:39:2f:e4:a8:99:55:f9:58:7b:
         2c:c4:c5:1b:8e:29:dc:6b:e5:52:22:eb:45:c0:6d:78:55:1f:
         f4:8b:81:a2:e0:7f:20:aa:e9:44:ac:84:85:d7:ad:60:2d:f9:
         b2:d7:2b:67:92:66:8b:4e:45:21:3f:ba:d3:7f:28:0a:8b:d3:
         71:a7:a8:25:13:a0:be:2f:07:65:44:d4:56:13:43:95:d7:1f:
         5f:61:5e:eb:c9:38:ba:ce:24:2c:ab:91:26:10:e3:56:f0:ee:
         26:38:dd:bc:22:e2:5a:3e:17:54:a5:f3:ff:8f:5c:3f:7a:a3:
         1f:7e:b9:fd:8d:cb:50:71:f4:80:c3:de:cc:83:63:c9:de:45:
         b3:e3:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:18 2026 by rpki-client